HP HPE7-A11 Online Access

Free-space path loss increases with radio frequency when transmission distance and antenna characteristics are held constant.

Consequently, a 6 GHz wireless signal experiences greater free-space path loss than a 2.4 GHz signal over an equivalent distance.

For example, comparing 6 GHz with 2.4 GHz produces approximately 8 dB of additional free-space path loss at the same distance.

This difference is important because the original WLAN was designed primarily around 2.4 GHz coverage.

A design optimized for 2.4 GHz may not provide equivalent 6 GHz coverage, particularly through walls, partitions, and other building materials.

Option A incorrectly assumes that existing AP positions can automatically be reused. HPE recommends validating modern WLAN designs with appropriate survey measurements rather than relying on previous AP placement.

Option B is incorrect because the stated objective is a high-density, future-ready network supporting Wi-Fi 6E or newer technologies.

Option D incorrectly disregards potential RF interference and other physical constraints.

HPE Aruba Networking's Wi-Fi 6E deployment guidance identifies additional attenuation through building materials and recommends positioning APs close to users.

The architect should therefore perform a new RF survey that evaluates 6 GHz coverage, client capacity, power restrictions, channel availability, and physical installation conditions.

Official HPE Reference: HPE Aruba Networking Wi-Fi 6E Planning and Deployment; Campus Design Validated Solution Guide — RF Design and 6 GHz Propagation.

===============

HPE Aruba Networking Central provides distinct subscription options for wireless gateway and SD-Branch gateway deployments.

The SD-Branch subscription incorporates branch networking capabilities, including WAN orchestration, dynamic path steering, secure connectivity, and branch gateway management.

HPE's official Central Licensing Guide explicitly confirms that gateways assigned SD-Branch licenses can continue to perform wireless management functions.

This makes option C correct.

Option B reverses the licensing relationship. A WLAN Gateway subscription provides wireless gateway functionality but does not automatically authorize the complete SD-Branch feature set.

Option A is incomplete because Foundation, Foundation Base, and Advanced are subscription tiers associated with gateway licensing, particularly SD-Branch. They do not describe the full range of gateway deployment-specific licenses, including WLAN Advanced and security variants.

Option D is incorrect because SD-WAN functionality is available with appropriate base SD-Branch subscriptions. Security-enhanced subscriptions add features such as intrusion detection and prevention, anti-malware, and advanced security monitoring.

The architect should distinguish the required gateway persona from its subscription tier when preparing the bill of materials.

This ensures the customer purchases licenses aligned with the intended WLAN, branch routing, WAN optimization, and security functions.

Official HPE Reference: HPE Aruba Networking Central Licensing Guide — Gateway License Types; AOS-10 Gateway Deployment Personas.

===============

Network device management security requires administrators to authenticate before gaining access to infrastructure configuration and operational functions.

RADIUS and TACACS+ are commonly used AAA protocols for managing administrative access to network devices.

Option A is correct because RADIUS supports authentication and authorization services and can be integrated with HPE Aruba Networking switches for management access control.

RADIUS commonly transports authentication and authorization information through UDP-based communication and can also provide accounting information.

Option D is correct because TACACS+ is designed to provide centralized AAA services for administrative device access.

TACACS+ separates authentication, authorization, and accounting functions, allowing administrators to implement granular command-level authorization policies where supported.

This makes TACACS+ particularly appropriate for enterprise environments requiring detailed administrator privileges and audit records.

Option B, LDAPS, provides encrypted communication with an LDAP directory service. Although directory services may supply user identity information to an authentication platform, LDAPS is not one of the two primary network device AAA protocols being assessed.

Option C, GRE, is a tunneling protocol used to encapsulate network traffic and does not provide administrator authentication.

HPE Aruba Networking AOS-CX supports RADIUS and TACACS+ authentication, allowing centralized management-access policies and integration with external AAA infrastructure.

Official HPE Reference: HPE Aruba Networking AOS-CX Security Guide — RADIUS and TACACS+ Authentication; Management Access Security and AAA Configuration.

===============

A passive wireless site survey is the most appropriate method for identifying unauthorized or previously undocumented wireless infrastructure within a manufacturing environment.

A passive survey collects radio-frequency information without requiring active association with the discovered wireless networks. Wireless survey equipment can detect beacon frames, advertised SSIDs, BSSIDs, operating channels, received signal strengths, and other characteristics of nearby wireless devices.

This approach can identify unauthorized access points, privately installed wireless routers, mobile hotspots, and equipment operating outside the organization's approved wireless architecture.

Option A is inadequate because a ping sweep detects reachable IP endpoints but cannot reliably discover isolated wireless networks or unmanaged devices that are disconnected from the corporate infrastructure.

Option B depends on employee disclosure and does not provide independent technical verification.

Option D describes a possible diagnostic technique, but packet-capture software alone is not equivalent to a structured RF survey with documented coverage and device classification.

Option C also includes an important operational consideration: detected devices should be reviewed with the customer before corrective action.

In a production facility, unauthorized wireless equipment may support undocumented operational processes. Removal must therefore follow validation, impact assessment, and approved change-management procedures.

Official HPE Reference Topics: HPE Aruba Networking Campus Design — RF Assessment, Wireless Site Surveys, Rogue AP Detection and WIDS/WIPS; Current Environment Discovery.

===============